2025 State of Cloud Security Report

85% of organizations have plaintext secrets embedded in their source code repositories.

93% of organizations have at least one privileged service account, linked to Kubernetes adoption

62% of organizations have at least one vulnerable AI package.

Nearly a third of cloud assets are neglected today.

76% of organizations have at least one public-facing asset that enables lateral movement.

Each neglected cloud asset contains on average 115 vulnerabilities.

84% of organizations now use AI in the cloud.

36% of organizations have at least one cloud asset supporting more than 100 attack paths.